auth links seem to work, needs some testing and cleanup